Carriers dropping legacy IP network and providing only direct connection to few popular CDNs would be natural next step for this security strategy.